Details

Periodic file checking allows the system administrator to determine on a regular basis if

critical files have been changed in an unauthorized fashion.

Solution

Run the following command – # crontab -u root -eAdd the following line to the crontab-0 5 * * * /usr/sbin/aide –checkNotes-The checking in this recommendation occurs every day at 5am. Alter the frequency and time of the checks in compliance with site policy.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1863

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-7(1)
• CSCv6|3.5

Source

• Tenable.com/audits